Exploitation Summary
EIP tracks 2 public exploits for CVE-2007-1020. PoCs published by sn0oPy.
AI-analyzed exploit summary The provided text describes a cross-site scripting (XSS) vulnerability in CedStat 1.31 and prior versions. It includes a proof-of-concept URL demonstrating the vulnerability by injecting arbitrary script code via the 'hier' parameter.
Description
Cross-site scripting (XSS) vulnerability in index.php in CedStat 1.31 allows remote attackers to inject arbitrary web script or HTML via the hier parameter.
Exploits (2)
The provided text describes a cross-site scripting (XSS) vulnerability in CedStat 1.31 and prior versions. It includes a proof-of-concept URL demonstrating the vulnerability by injecting arbitrary script code via the 'hier' parameter.
This exploit demonstrates a remote file inclusion vulnerability in CedStat 1.31 due to insufficient input sanitization. The provided URL encodes a malicious PHP payload in the 'hier' parameter, which can lead to arbitrary code execution.